Cloud-Native AppSec Leader & AI Security Architect

Cybage Software; United States; On-site; USD 150,000 - 190,000; Full time

Job summary

Cybage Software seeks an accomplished security engineering lead to drive application security programs across cloud-native systems. You will guide engineering teams, shape security strategy, and implement scalable controls in fast-paced environments.

The role demands deep expertise in secure software design, threat modeling, and DevSecOps, with strong focus on AI/ML security and proactive tooling enhancements. 5+ years of related experience is expected.

Qualifications

• 5 years of relevant experience in Application Security, AppSec engineering, Cloud Security, or Software Engineering
• Deep expertise in application security, secure software design, and risk management, including frameworks such as OWASP ASVS, OWASP Top 10, and NIST 800‑53
• Extensive experience conducting complex security assessments and building automated security controls for large engineering environments
• Strong understanding of modern architectures (cloud-native, microservices, Kubernetes, containers, serverless) and DevSecOps processes
• Advanced understanding of AI/ML security, including model vulnerability analysis, AI threat modeling, secure LLM integration patterns, and familiarity with NIST AI RMF or OWASP Top 10 for LLMs

Responsibilities

• Design and implement security architectures and controls for large-scale, cloud-native applications.
• Conduct in-depth risk assessments, including penetration testing and code reviews.
• Collaborate with developers and DevOps teams to integrate security at all stages of the software development lifecycle (SDLC).
• Drive security for AI-powered features by defining secure architectures, assessing AI/ML risks, and implementing advanced testing and controls for AI models, agents, and MCP servers.
• Identify areas of improvements in security tools and practices, and remediate the identified gap by implementing innovative solutions.
• Evaluate third‑party security tools and vendor‑provided controls for technical effectiveness, enterprise fit, and alignment with organization’s security architecture and standards.
• Collaborate with vendors to provide actionable technical feedback, drive product improvements, and ensure controls are implemented and configured appropriately for Bloomberg Industry Group’s environment.
• Build, improve, and scale security automation, integrating tooling across CI/CD pipelines and cloud platforms.
• Provide guidance to junior engineers and cross-functional teams on security best practices.
• Participate in incident response efforts and investigations into security incidents.
• Stay ahead of the curve by keeping informed of industry trends and emerging threats, applying this knowledge to continually improve security

Skills

Application Security

Cloud Security

Security Architecture

DevSecOps

AI/ML Security

Risk Assessment

Job description

Cybage Software seeks an accomplished security engineering lead to drive application security programs across cloud-native systems. You will guide engineering teams, shape security strategy, and implement scalable controls in fast-paced environments.

The role demands deep expertise in secure software design, threat modeling, and DevSecOps, with strong focus on AI/ML security and proactive tooling enhancements. 5+ years of related experience is expected.